1. Are Attestations meant to be reviewed by the Compliance team? The functionality of the Control Attest State does not allow for Compliance to followup after the Control Owner attests/adds evidence because it automatically 'completes' the attestati...
Hi, everyone. Risk events have "Expected loss" field and "Potential loss" field. What functional differences exist between them?I have confirmed that entering values into the Expected loss field reflects the Expected loss figure at the top of the Ris...
Hello Everyone,When I testing the Mandates on compliance workspace. I got a one defect Which is The 'Compose' Heading is missing in the mandates records of Activity section on right side. But when I move the mouse over to that one of the field in tha...
Can any one help me to sort out this thing in IRM.As a CDO delegate land into compliance workspace homepage, then under quick links, I should be able to view control report. Present CDO delegate unable to access the Control report.
Hello All,I have a requirement to Translate the policy to brazilian portuguese once the policy is published.By default the policy is in English while publishing.If anyone has seen similar cases for Translation need your suggestions for the same.Regar...
I wanted to know complete flow of Evidence Request in IRM and how do we collect the Evidence, what is use of 'Evidence Collection Details', what is Evidence?Can someone explain me the use of Evidence request with the example of Control record.
In Compliance Workspace- New Button is not visible to CDO, CDO delegate on Risk Statement related tab on all states of control definition. But Here problem is On Declarative actions New button is in Inactive state and On Ui actions there is no new bu...
Anyone worked for integrating servicenow with any GRC tools? If yes please share any documents available.
We have a requirement where client documents are stored in Microsoft OneDrive, and we need to use these documents in policies within ServiceNow. Once these policies are approved, they should be converted into knowledge articles. However, we are unsur...
Governance, Risk, and Compliance (GRC) are critical components for any organization aiming to manage risk effectively, stay compliant with regulations, and ensure business continuity. But managing these manually is complex, time-consuming, and prone ...
Hi All, We have a requirement to generate an audit report in word format at an engagement record level. In order to meet this requirement, we came across a ServiceNow plugin which supports this functionality i.e. "ServiceNow Document Designer with Wo...
I have heatmap, where i can use two colors to define them which is available in out - of - box configurationbut i need to define multiple colours to define heatmap.this is the heatmap which is was createdbut i want to replicate in this way can anyon...
Hello,What is the objective of setting a functional domain in IRM? Thank youBest regards
I have 3+ years of experience in ITSM and Integrations, and I recently started learning ServiceNow GRC. I have a good understanding of Policy & Compliance, Risk Management, and Audit Management. However, I find the advanced parts of Risk and Audit a ...
Hello Community! My question is rooted in a use case which we implement in Policy & Compliance Management. I'll try to explain as best as I can in a fictional use case. Use CasePolicy: Reports are not allowed to contain personal data. (Reports are b...
